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Amendmentg to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in the 



1.-16. (canceled) 

17. (currently amended) An access control system in which a plurality of 
storage devices for storing information resources and access controllers for 
controlling accesses to the information resources stored in the storage devices are 
connected with a network, each of the access controllers having an access control 
list on which access right to each Information resource stored in the storage devices 
is recorded, and each of the access controllers having an access prohibition list on 
which user information of a ccess prohibited users are recorded who are prohibited 
from accessing any infomiation resource stored in the storage devices, each access 
controller comprising: 

an access restriction module configured to restrict access to each information 
resource stored in a storage device and listed on the access control list of the access 
controller that records access right to each information resource; 

an access interception module configured to rostrio t intercept the access by 
reference to the access prohibition list of the access controller, which records user 
information of access prohibited users, prior to referencing t he access control list^ 
the access restriction module: 

a list update module configured to update the access prohibition list; 
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an access control list update module configured to update the access control 
list according to the updated access prohibition list; and 
a distribution module; 

wherein the distribution module of at least one of the access controllers 
having received user Infomiatlon to be added to the access pr ohibition list thereof. 
and an updated access prohibition list updated accordinoiv. I s configured to send out 
the user infonnation added to the updated access prohibition o r the entire updated 
access prohibition list to the other access controllers in response to the access 
prohibition list of the sending access controller being updated; 

wherein the list update module of each of the other access controllers is 
configured to receive the sent-out user Information n r - tho updat e d updated access 
prohibition4ist_!isL and to update the access prohibition list thereof to Include the 
received user information or updated access prohibition list, 

wherein after the !ist update module of each of the other access controllers 
updates the access prohibition list thereof, the access control list update module 
thereof updates the access control list thereof according to the updated access 
prohibition list thereo f, removing access rights from the access control list for anv 
user corresponding to the user information in the updated ac cess prohibition list: 

wherein in rocponco to after completing the updating of the access control list 
thereof, each of the other access controllers deletes the received user information 
from Its updated access prohibition list or the entire updated prohibition list, and 
notifies the sending access controller of said completion; and 

wherein the list update module of the sending access controller deletes the 
user Infonmation on its access-prohibited list o r the enti£§.access prohibition list 
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thereof at a predetermined timing after receiving the completion notifications from the 
other access controllers. 

1 8. - 28. (Canceled) 

29. (previously presented) An access control system according to claim 17, 
vvherein the sending access controller is configured to send an Instruction to each of 
the other access controllers for deleting the user information or updated access 
prohibition list sent thereto, said instruction being sent by the sending access 
controller to each of the other access controllers after receiving said notification of 
completion therefrom. 

30. (previously presented) An access control system according to claim 29. 
wherein each of the access controllers manages a different respective information 
resource on the basis of at least one of the access control list and the access 
prohibition list in the access controller to control accesses from a client computer 
with user information. 

31. (currently amended) An access control system according to claim 29. 
wherein each of the access controllers manages information resources in a different 
respective first network, and each of the first networks is coupled to a second 
network. 
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32. (new) An access control system according to clainn 17, wherein the 
sending access controller further comprises a storage manager including an access 
management table on which status of accesses to the information resources stored ' 
in the storage devices is reported with a correspondence to the accessing user 
thereof, 

wherein the access interception module intercepts any access, appearing in 
the access management table, by a user whose user information is on the access 
prohibition list. 
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